Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa
File: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (raw, json)
Hash identifier: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=
Subject key identifier: D3:C2:8F:AF:3B:CA:D9:64:56:A4:3E:A9:E4:22:7E:52:5E:DC:97:D2
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 0198747B8768BE701A878EB7C47CD2EE14A7
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa
Signing time: Mon 04 Aug 2025 09:48:29 +0000
ROA not before: Mon 04 Aug 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42943
IP address blocks: 77.240.80.0/22 maxlen: 22
77.240.80.0/24 maxlen: 24
77.240.81.0/24 maxlen: 24
77.240.82.0/24 maxlen: 24
77.240.83.0/24 maxlen: 24
77.240.86.0/23 maxlen: 23
77.240.86.0/24 maxlen: 24
77.240.87.0/24 maxlen: 24
77.240.88.0/21 maxlen: 21
77.240.88.0/24 maxlen: 24
77.240.89.0/24 maxlen: 24
77.240.90.0/24 maxlen: 24
77.240.91.0/24 maxlen: 24
77.240.92.0/24 maxlen: 24
77.240.93.0/24 maxlen: 24
77.240.94.0/24 maxlen: 24
77.240.95.0/24 maxlen: 24
85.184.232.0/22 maxlen: 22
85.184.232.0/24 maxlen: 24
85.184.233.0/24 maxlen: 24
85.184.234.0/24 maxlen: 24
85.184.235.0/24 maxlen: 24
85.184.236.0/23 maxlen: 23
185.109.176.0/22 maxlen: 22
185.109.176.0/24 maxlen: 24
185.109.177.0/24 maxlen: 24
185.109.178.0/24 maxlen: 24
185.109.179.0/24 maxlen: 24
2a0c:1a40::/29 maxlen: 29
2a0c:1a40::/31 maxlen: 31
2a0c:1a40:1000::/36 maxlen: 36
2a0c:1a40:2000::/36 maxlen: 36
2a0c:1a41:1000::/36 maxlen: 36
2a0c:1a41:2000::/36 maxlen: 36
2a0c:1a42::/31 maxlen: 31
2a0c:1a44::/31 maxlen: 31
2a0c:1a46::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:7b:87:68:be:70:1a:87:8e:b7:c4:7c:d2:ee:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Aug 4 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3c28faf3bcad96456a43ea9e4227e525edc97d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:6f:14:d5:f3:05:7b:b9:cc:34:37:ae:5c:
cf:33:b8:70:dd:87:d2:e6:77:ea:a0:93:60:77:6f:
fe:ac:a5:4a:54:78:cb:90:be:4f:55:48:27:cf:ff:
88:92:8e:dd:9d:bd:c3:ab:91:a0:cc:a6:7f:e0:7e:
4b:45:50:c3:db:e4:a8:cf:3e:9f:aa:ca:21:69:db:
96:3d:28:08:6c:2d:09:fe:f1:04:b4:38:25:ba:b6:
42:a5:30:bf:a9:48:f9:93:06:45:93:ac:c8:70:81:
2f:87:be:79:a5:35:89:d8:2f:06:12:a4:a5:c2:31:
92:db:63:f0:f3:84:df:4c:06:90:c8:9c:01:4a:ed:
47:0d:e1:30:3f:b7:11:9f:c5:f2:ff:62:65:88:c9:
71:8f:33:92:a0:48:ad:61:5a:5d:8b:8e:e9:77:72:
20:c6:37:f8:0b:ad:9c:73:ec:01:7e:0d:6e:dc:54:
5e:f5:8c:66:36:d7:ad:9f:e5:9c:2e:a0:c2:d8:eb:
ad:e4:ad:24:05:d7:a9:a3:70:c5:c1:4f:25:03:19:
27:51:a9:31:85:a9:0c:9e:ad:ba:21:aa:12:00:a3:
b9:8c:0a:ff:a1:df:62:02:95:79:e0:a8:7d:41:a4:
ce:f3:c3:cd:38:b7:8e:ab:1d:0d:4e:d7:8d:27:5e:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:8F:AF:3B:CA:D9:64:56:A4:3E:A9:E4:22:7E:52:5E:DC:97:D2
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.80.0/22
77.240.86.0-77.240.95.255
85.184.232.0-85.184.237.255
185.109.176.0/22
IPv6:
2a0c:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
10:93:59:35:12:46:d1:07:7e:a5:c9:fa:dd:58:ca:a3:2d:04:
b1:cc:91:18:7e:cf:0b:f6:37:90:06:3d:90:d9:1c:83:40:86:
aa:b3:2a:6f:97:96:4d:fc:da:bf:ee:16:e9:58:da:d3:c7:ef:
44:0f:bc:df:53:5d:7b:c3:a9:bf:37:6f:50:c3:9e:3e:61:ad:
4d:af:14:86:8f:54:4d:d6:13:af:47:9d:a4:81:3a:48:f5:06:
01:81:2d:bf:b9:f8:8a:0a:62:00:1b:c1:67:6d:83:5c:b3:25:
bd:21:0f:e8:ce:3e:de:28:ce:5d:e7:80:f7:e1:26:89:6d:74:
f6:30:46:5e:8a:e0:d0:17:f6:ce:f9:84:b4:bb:fa:33:5e:5a:
a8:75:ef:a9:50:8e:0a:cf:74:fb:9e:2e:5c:67:92:78:b1:d9:
79:54:18:90:d0:a0:8a:44:dc:40:2e:ec:c5:1d:6d:6a:5a:05:
60:4f:0d:bd:e3:f5:6e:a6:9c:4c:11:c3:b8:77:65:7a:6d:fb:
e3:27:71:3e:d0:3a:13:b3:af:e0:d6:e8:3e:67:92:f2:d8:9e:
22:f9:be:96:e1:85:b7:62:e2:67:c3:e1:9d:05:9a:12:48:32:
b8:44:81:b2:6b:dc:43:e5:b2:8b:1d:c9:d7:84:65:03:30:b9:
8d:d8:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:21 2025 by rpki-client